Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74E682680F2111F1AEB50295DAE4EC9C.roa
File: 74E682680F2111F1AEB50295DAE4EC9C.roa (raw, json)
Hash identifier: X0LKIuIIUla3aHnjJQJ+HkEO+3KzSk6/e8QqFsC52cA=
Subject key identifier: 08:87:B3:93:C7:9B:3E:0E:2C:78:E6:BD:9A:1C:F6:2B:0A:9A:5E:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BAED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74E682680F2111F1AEB50295DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 12:32:59 +0000
ROA not before: Sat 21 Feb 2026 12:32:56 +0000
ROA not after: Tue 24 Mar 2026 12:32:56 +0000
asID: 55020
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113389 (0x1baed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 21 12:32:56 2026 GMT
Not After : Mar 24 12:32:56 2026 GMT
Subject: CN=6999a5fb-f7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:c5:da:e1:2e:c2:ee:fd:8c:da:10:9c:fe:
fa:a8:10:cc:09:60:74:40:49:4b:a9:c9:00:d0:fa:
ba:db:c4:96:89:ad:ae:b9:6b:c5:84:b7:72:a6:d8:
75:29:88:92:fe:47:f5:0f:5b:9d:26:fd:89:df:27:
36:73:2a:df:ac:3d:9f:86:a4:43:e9:01:94:21:35:
49:e8:db:48:a3:48:b3:85:04:41:ea:80:18:e3:7c:
ca:08:13:2c:e7:38:50:3b:77:fa:d3:77:0a:50:ce:
65:21:a5:3e:69:c5:97:52:a9:7d:21:cf:23:cd:59:
71:b7:81:3b:07:00:1a:8a:32:1e:b2:3b:da:e4:5c:
77:c3:0d:4d:f3:6a:0a:a7:3e:2b:2b:96:5b:bb:95:
54:8f:48:9b:98:9e:a6:a7:cf:6a:ee:23:ac:0d:54:
9a:83:24:9a:72:48:43:70:c5:02:4f:0c:2c:a8:28:
3e:2a:49:63:79:cd:f4:92:44:f2:12:26:e5:a2:00:
22:1c:f7:c1:c4:b3:15:ce:6e:a8:86:44:7f:a8:0e:
e6:85:44:ee:62:f9:2b:85:bb:6e:d8:f6:fc:56:09:
dc:4b:7b:f0:6c:41:11:4d:67:fa:ae:fc:5a:06:77:
14:ad:42:96:9d:46:47:06:ea:81:1a:38:9c:79:d0:
b1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:87:B3:93:C7:9B:3E:0E:2C:78:E6:BD:9A:1C:F6:2B:0A:9A:5E:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74E682680F2111F1AEB50295DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
40:c9:49:86:02:12:bc:25:5f:1b:bb:e4:e2:43:5f:71:f5:10:
7f:1d:71:73:e0:4c:30:1e:ea:4b:56:9d:b6:38:18:ee:df:17:
32:4e:54:81:f1:f3:a0:34:8b:b3:ec:84:c4:02:c7:d1:75:d3:
02:ae:e9:c7:ec:eb:11:ec:f8:60:ab:be:e5:2a:df:7e:5e:23:
00:7f:12:74:b6:6b:9b:41:86:03:89:44:c9:41:fe:38:0a:1f:
90:54:6d:e6:39:f4:ab:5b:f5:be:ea:39:2d:0d:2b:8f:39:b3:
cb:4e:04:b5:a5:53:26:22:fb:30:2b:41:7c:ef:55:d9:87:e1:
95:ee:bf:65:47:8e:a8:20:77:6b:09:e8:9b:74:e5:ec:f2:1f:
16:a4:2e:6a:ce:19:42:55:12:6a:41:f8:15:5e:b7:f7:10:24:
73:1d:ee:21:20:8a:88:d3:77:ff:06:20:9f:10:ab:bd:ce:0b:
db:ec:53:3f:27:89:f1:0d:57:a1:ca:10:0b:02:92:59:bd:25:
a7:53:60:2d:29:3e:06:b0:91:57:24:7f:85:8d:0f:73:2d:96:
30:f4:07:5d:12:c4:d1:f1:03:3f:c2:1d:83:dd:1b:0d:10:7e:
55:1a:94:30:a1:e1:ab:da:ed:d5:35:af:67:33:55:fd:97:ed:
fc:32:f2:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbrtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjIxMTIzMjU2WhcNMjYwMzI0MTIzMjU2WjAYMRYw
FAYDVQQDEw02OTk5YTVmYi1mN2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtVrF2uEuwu79jNoQnP76qBDMCWB0QElLqckA0Pq628SWia2uuWvFhLdy
pth1KYiS/kf1D1udJv2J3yc2cyrfrD2fhqRD6QGUITVJ6NtIo0izhQRB6oAY43zK
CBMs5zhQO3f603cKUM5lIaU+acWXUql9Ic8jzVlxt4E7BwAaijIesjva5Fx3ww1N
82oKpz4rK5Zbu5VUj0ibmJ6mp89q7iOsDVSagySackhDcMUCTwwsqCg+Kkljec30
kkTyEiblogAiHPfBxLMVzm6ohkR/qA7mhUTuYvkrhbtu2Pb8VgncS3vwbEERTWf6
rvxaBncUrUKWnUZHBuqBGjicedCxqwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAiH
s5PHmz4OLHjmvZoc9isKml5/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NEU2ODI2ODBGMjExMUYxQUVCNTAyOTVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml8YMA0GCSqGSIb3DQEB
CwUAA4IBAQBAyUmGAhK8JV8bu+TiQ19x9RB/HXFz4EwwHupLVp22OBju3xcyTlSB
8fOgNIuz7ITEAsfRddMCrunH7OsR7Phgq77lKt9+XiMAfxJ0tmubQYYDiUTJQf44
Ch+QVG3mOfSrW/W+6jktDSuPObPLTgS1pVMmIvswK0F871XZh+GV7r9lR46oIHdr
CeibdOXs8h8WpC5qzhlCVRJqQfgVXrf3ECRzHe4hIIqI03f/BiCfEKu9zgvb7FM/
J4nxDVehyhALApJZvSWnU2AtKT4GsJFXJH+FjQ9zLZYw9AddEsTR8QM/wh2D3RsN
EH5VGpQwoeGr2u3VNa9nM1X9l+38MvIM
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:44 2026 by rpki-client